Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11a2e412-e6ad-3857-91ba-7b687a5eb605.roa
File:                     11a2e412-e6ad-3857-91ba-7b687a5eb605.roa (raw, json)
Hash identifier:          P6zIHwgabkC10uLA11xSciw8GTnJwrNSxX77dK0pdQc=
Subject key identifier:   BC:EC:A1:97:1D:3F:AF:AC:0E:3B:91:13:E7:0E:A9:05:AF:76:1F:88
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A2AB162DF1515D60EF6ED3100
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11a2e412-e6ad-3857-91ba-7b687a5eb605.roa
Signing time:             Thu 12 Jun 2025 12:42:07 +0000
ROA not before:           Thu 12 Jun 2025 12:42:07 +0000
ROA not after:            Wed 10 Sep 2025 12:42:07 +0000
asID:                     397206
IP address blocks:        2001:502:1ca1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:b1:62:df:15:15:d6:0e:f6:ed:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 12 12:42:07 2025 GMT
            Not After : Sep 10 12:42:07 2025 GMT
        Subject: CN=ea89027c-93e3-4750-8324-a877dd683914
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e8:aa:4f:00:5d:2a:25:8f:c7:08:35:7e:09:
                    be:9c:44:56:4d:4f:e3:05:95:fb:93:14:1b:32:d4:
                    75:a9:a4:a3:b0:4c:7f:82:fe:c2:83:2d:6c:0c:5f:
                    83:ea:ce:f8:81:37:d1:65:b7:dc:9e:c1:40:27:f2:
                    81:b3:58:74:ba:74:9a:00:05:a0:4e:97:14:7d:1f:
                    7f:3d:09:19:c7:87:be:e4:a0:3f:fe:fe:78:f0:f8:
                    33:82:6b:3f:3f:56:db:87:16:b7:01:1e:e5:9b:ac:
                    ef:61:7c:6f:4a:07:2f:54:3f:19:e8:f9:88:57:3a:
                    17:a2:d0:86:f4:a0:29:5e:99:25:49:c0:2b:2e:95:
                    ec:a2:5d:25:b9:26:fc:89:d0:94:f5:18:00:51:34:
                    ed:80:0f:9a:f5:e5:3e:99:6e:f5:72:eb:15:a5:6a:
                    7c:4c:e3:7e:0a:cb:62:82:26:6b:9e:fd:e4:43:67:
                    a7:1f:05:5d:cd:b8:b3:56:67:19:79:b7:ae:81:62:
                    ec:64:5b:e9:35:d1:17:b3:aa:d1:e0:54:b0:ea:42:
                    84:09:bb:04:85:9e:29:07:ac:60:3d:d3:54:fd:03:
                    92:1d:50:fa:c4:88:2e:aa:52:8b:cb:3a:33:72:0b:
                    1c:f2:c9:59:9b:34:77:ac:e8:e1:c4:03:b6:99:d0:
                    06:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:EC:A1:97:1D:3F:AF:AC:0E:3B:91:13:E7:0E:A9:05:AF:76:1F:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/11a2e412-e6ad-3857-91ba-7b687a5eb605.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:502:1ca1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:19:48:1f:2a:d2:00:6f:f2:fe:bb:ac:30:ed:17:18:b8:c9:
         af:e0:31:8d:67:dc:99:f7:1f:a3:74:35:81:b5:75:08:27:17:
         aa:90:2f:4a:20:d4:f5:25:6d:4f:53:b8:52:f7:31:d5:81:17:
         50:69:ab:af:9d:9c:09:a6:bd:c3:ae:10:e6:28:6a:e6:55:a0:
         ed:c5:98:ae:87:90:fd:95:3a:3e:78:2d:b0:47:ed:c0:35:b4:
         49:e8:17:b6:e6:b8:47:1f:bd:ab:b0:c2:b9:8f:98:be:5a:8a:
         24:5b:fa:9b:10:3f:1d:8f:83:b4:b2:5b:19:03:4e:c8:95:49:
         99:4f:2e:b3:62:83:41:83:8b:40:a8:81:78:cb:14:03:34:c5:
         3b:6a:f2:76:3b:9c:6a:37:b3:51:e2:65:71:ef:57:55:c6:9a:
         2a:c0:78:79:2c:63:78:dd:e9:46:b2:0c:ff:c6:3e:1e:f2:d4:
         56:7d:16:c6:69:bb:7b:ad:75:98:09:a3:b8:43:d5:bb:4a:54:
         9c:d1:c6:dd:90:f4:4d:09:e8:35:ac:33:70:45:bd:a2:ee:f2:
         46:b3:a2:cc:11:42:73:32:94:c6:8a:1b:63:16:4b:a2:fe:52:
         1d:16:80:3b:d6:e4:42:20:30:31:56:97:4d:7d:ae:89:10:9a:
         73:a1:73:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:04:30 2025 by rpki-client